Binutils: Multiple vulnerabilities

Binutils: Multiple vulnerabilities Multiple vulnerabilities have been found in Binutils, the worst of which may allow remote attackers to cause a Denial of Service condition. binutils 2019-08-03 2019-08-03 672904 672910 674668 682698 682702 remote 2.32-r1 2.32-r1

The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation.

Multiple vulnerabilities have been discovered in Binutils. Please review the referenced CVE identifiers for details.

A remote attacker, by enticing a user to compile/execute a specially crafted ELF, object, PE, or binary file, could possibly cause a Denial of Service condition or have other unspecified impacts.

There is no known workaround at this time.

All Binutils users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=sys-devel/binutils-2.32-r1"

CVE-2018-10372 CVE-2018-10373 CVE-2018-10534 CVE-2018-10535 CVE-2018-12641 CVE-2018-12697 CVE-2018-12698 CVE-2018-12699 CVE-2018-12700 CVE-2018-13033 CVE-2018-19931 CVE-2018-19932 CVE-2018-20002 CVE-2018-20651 b-man b-man